verifier

type CachingVerifyStrategy struct {
	// contains filtered or unexported fields
}

type FallbackVerifyStrategy struct {
	// contains filtered or unexported fields
}

type LocalStrategyOption func(*LocalVerifyStrategy)

type LocalVerifyStrategy struct {
	// contains filtered or unexported fields
}

type RemoteVerifyStrategy struct {
	// contains filtered or unexported fields
}

type StrategySelector struct {
	// contains filtered or unexported fields
}

type TokenClaims struct {
	TokenID   string
	Subject   string
	SessionID string
	Issuer    string
	Audience  []string
	ExpiresAt time.Time
	IssuedAt  time.Time
	NotBefore time.Time
	UserID    string
	AccountID string
	TenantID  string
	Roles     []string
	Scopes    []string
	TokenType string
	AMR       []string
	Extra     map[string]interface{}
}

type TokenVerifier struct {
	// contains filtered or unexported fields
}

type TokenVerifierOption func(*TokenVerifier)

type VerifyMetadata struct {
	TokenType authnv1.TokenType
	Status    authnv1.TokenStatus
	IssuedAt  time.Time
	ExpiresAt time.Time
}

type VerifyOptions struct {
	ForceRemote      bool
	IncludeMetadata  bool
	ExpectedAudience []string
	ExpectedIssuer   string
}

type VerifyResult struct {
	Valid    bool
	Claims   *TokenClaims
	Metadata *VerifyMetadata
	RawToken jwt.Token
}

type VerifyResultCache interface {
	Get(token string) (*VerifyResult, bool)
	Set(token string, result *VerifyResult, ttl time.Duration)
}

type VerifyStrategy interface {
	Verify(ctx context.Context, token string, opts *VerifyOptions) (*VerifyResult, error)
	Name() string
}

type VerifyTokenClient interface {
	VerifyToken(context.Context, *authnv1.VerifyTokenRequest) (*authnv1.VerifyTokenResponse, error)
}